Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

0
votes
0answers
95 views

Poor disk performance on KVM guest

I have a server running Proxmox and some Linux VMs running on it. On the host, I get 200+ MB/s write to the disk On a VM, I only get around 50-60 MB/s Caching is disabled for all VMs. I'm using ...
0
votes
0answers
140 views

What is the failed dependency during cryptography setup of systemd?

I'm using Ubuntu 16.04 LTS Server in a VM with one unencrypted hard disk for / and an additional LUKS-encrypted one for some arbitrary data. The encrypted disk is opened and mounted with a password ...
0
votes
1answer
202 views

cryproot-unlock with dropbear: Timeout while waiting for askpass

I installed Debian 9 on a VPS and configured the root partition to be encrypted. However, due to the installer giving me trouble when attempting to encrypt, I had to do this manually. To be able to ...
0
votes
1answer
157 views

luks IO error while decrypting keyslot

I'm trying to use cryptsetup to encrypt some partitions, but getting the error IO error while decrypting keyslot. The command and output is: root@rescue ~ # cryptsetup --debug --verbose --cipher aes-...
1
vote
1answer
119 views

Mount LUKS-encrypted drive at boot, but only if drive is present

I have a series of drives that are are all encrypted with LUKS/dm-crypt. They are not all guaranteed to be plugged in at the time the system boots, but if they are, I would like to ensure they are ...
0
votes
1answer
216 views

Debian 9 fstab two mount points (uuid) same destination

I have encrypted luks partition. Key file is located on USB flash drive. I also created copy of that flash drive to another flash. How I can add two mount points in /etc/fstab that points to same ...
2
votes
1answer
271 views

Encrypt/Decrypt filesystem container file with smartcard on linux

I want to encrypt and decrypt a file system container file with luks and a smartcard on debian linux. The smartcard is a Nitrokey Start which is basically a compact smartcard in a usb reader. I know ...
1
vote
0answers
147 views

Is it possible to partially recover files from a btrfs raid-0 filesystem with a missing disk?

I've got a bit of a quite terrible situation on my hands and I'm just looking for a bit of insight before calling this a lost cause. To put things into context, I'll just give you my partitioning ...
1
vote
1answer
17 views

Restore back-up from pre-encrypted drive into newly encrypted drive

It sounds like I am going to be reinstalling CentOS 7 on a server this weekend. The original installation didn't have the drive encrypted and it needs to be done. My understanding is that this will ...
2
votes
1answer
68 views

Cryptsetup lost password but open device

first, I know it is a very bad situtation and one should always have a backup of keys but the problem is not caused by me. I only was ask for help. The drive is encrypted using cryptsetup with luks. ...
0
votes
1answer
948 views

LUKS Automatic unlock of with key file on remote ubuntu server

Is there a way to automatically unlock a LUKS drive at boot time with the key-file being stored on a remote machine. The idea is to make sure servers may restart without any user input. Servers are ...
-1
votes
2answers
105 views

What happens when an encrypted drive that is running (and thus decrypted) is unplugged? [closed]

Encrypted drives are usually decrypted at boot, so if the system is running live and the drive is unplugged while "hot" and plugged into another system will the data still be unencrypted? I may be ...
1
vote
2answers
204 views

Managing multiple LUKS devices

My linux fileserver has four LUKS-encrypted USB-3 disks. It's a bit confusing to mount them all: while they might get the same drive letters as last time, they might not, which leads to some trial ...
0
votes
1answer
53 views

tar of pg_dump huge await. Do additional writes to a luks encrypted disk require additional entropy?

We have a postgres server with 6 SSDs in a raid10. backing up the postgres database with pg_dump works fine and causes almost 0 load to the disks or cpu. Tar'ing said pg_dump without any options other ...
1
vote
1answer
287 views

Postgres Data Encryption Using LUKS with dm-crypt

We have encrypted volume using LUKS. cryptsetup luksOpen /root/test1 volume1 and mounted on mount /dev/mapper/volume1 /mnt/files We created postgres data directory inside /mnt/files and able to ...
0
votes
2answers
235 views

Troubles with swap on dm-crypt/LUKS partition

I have created two dm-crypt partitions during Debian install: sda2 sda2_crypt swap sda3 sda3_crypt / I used 7.8.1 netinstall ISO. Later I have added additional dm-crypted drive sdb: # ...
1
vote
1answer
119 views

Guestfish - libguestfs copy-out to a Remote VM

I have a need to move a number of files from a snapshot of a LUKS encrypted virtual machine (CentOS) to another one on a different hypervisor. I can mount the partition in the guestfish interactive ...
2
votes
0answers
39 views

Is it possible to decrypt data stored on the hard drive after it was used as LVM with encryption/LUKS? [closed]

How to define encryption strength for LVM partition/hard disk in Linux? Is it possible to decrypt the drive or its partition with the previously usage of encrypted LVM or encrypted LUKS? If yes, how ...
1
vote
0answers
254 views

ZFS over LUKS over (NBD or NFS)? Need encrypted replication solution

I am using ZFS(ZoL) over LUKS on home and on remote server. All is working perfectly and fast. I do snapshots by cron, but now I want to replicate them to some backup storage. I have a small 2-HDD ...
1
vote
0answers
567 views

cryptsetup cannot close mapped device

When I run: LANG=C cryptsetup --debug luksClose /dev/mapper/Pool-A it fails as follows: device-mapper: remove ioctl on Pool-A failed: Device or resource busy Device /dev/mapper/Pool-A is still ...
0
votes
2answers
123 views

Set LUKS password to user password

Is it possible to set the LUKS key of a specific slot to the user password? So if user bob has a password of 12345 I want to set slot#2 to 12345. I know I can set the key of a specific slot using ...
-1
votes
1answer
32 views

how to restore a lost file on luks

I have a file that has been overwritten. It's a .odt and mixed up with another .odt file on same partition. LUKS fully encrypted. It is not the point to unlock the vulume an mount. But the file is ...
0
votes
1answer
341 views

what is the most efficient way of unlocking a LUKS drive over the network when using key files?

It is easy to unlock a LUKS drive over SSH when the drive takes text passwords: cryptsetup luksOpen /dev/sdb1 mylockeddrive Then entering the password at prompt. Is there a way of unlocking these ...
4
votes
1answer
999 views

Exactly how does kickstart encrypt a partition?

Let's say for example I have this line in the pre section of my kickstart file: part / --asprimary --fstype="ext4" --size=10000 --encrypted --passphrase=pass1 Great, but, how does that work? Exactly ...
0
votes
0answers
196 views

What is LUKS's process for decryption?

LUKS allows multiple passphrases for a single device, however adding or revoking a passphrase doesn't take long. So the passphrases seem to only decrypt some master key which is then used for the rest ...
0
votes
1answer
87 views

Shrink non-bootable LUKS LVM

I'm importing a VMWare OVA whose second disk uses LUKS and configured to use 1TB of space, although its VMDK is only 30GB. I want to shrink this down. I am following the instructions here (https://...
3
votes
1answer
3k views

Filesystem Performance for LUKS Encrypted Volumes?

As you can format a LUKS volume with any filesystem you want, are certain filesystems better-suited to IO performance against an encrypted filesystem? Specifically, I'm wondering about a loop device ...
4
votes
1answer
2k views

Cryptsetup luks - Check that kernel supports aes-xts-plain64 cipher

I encrypted a bunch of hard drives with cryptsetup luks encryption on CentOS 5. Everything was fine, until I upgraded my system to CentOS 6. Now I cannot mount the disks anymore. To mount with my ...
5
votes
1answer
128 views

Can servers with encrypted root filesystems be made reasonably highly available?

I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
3
votes
0answers
506 views

Dual primary DRBD with LUKS encryption

Is it possible to create a LUKS encrypted filesystem that is accessible by both nodes of a dual primary DRBD system? Here is what I tried to do: Create two nodes and establish a partition on each ...
0
votes
1answer
829 views

Maximum length of a LUKS passphrase

Anyone know the maximum length of a LUKS passphrase? The passphrase will be randomly generated, and I can create one with any length. I am using CentOS 6 with Linux kernel 2.6.32-573.12.1.el6.x86_64,...
7
votes
2answers
283 views

LUKS Error During Boot

alg: drbg: could not allocate DRNG handle for ... I only see this error on the console during the boot process of virtual machines we create. EDIT: 2/5/16 - I see it on some bare-metal installations, ...
3
votes
1answer
118 views

How secure is information on a LUKS encrypted backup media?

Imagine confidential information (certificates, keys, whatever) stored on an LUKS encrypted backup disk containing for example an ext4 file-system. AFAIK such a device contains a key file which is in ...
0
votes
2answers
2k views

cryptsetup luksOpen key-file does not work

I am getting "No key available with this passphrase." when trying: sudo cryptsetup open --type luks /dev/sdc storage --key-file=/path/to/keyfile The /path/to/keyfile file contains just the ...
1
vote
1answer
156 views

LUKS Header - 30kB mysteriously missing

I have a disk containing (only) a LUKS encrypted volume. That was created on a bare drive with no partition table using cryptsetup v.1.6.1. When unlocked, I can check the size of the decrypted ...
-2
votes
1answer
395 views

how do I LUKS encrypt a drive that already has data?

On a CentOS 7 server, I would like to LUKS encrypt the entire hard drive, including a 50GB partition that has already received yum install and a few other updates, but nothing else. But this tutorial ...
2
votes
1answer
655 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
2
votes
1answer
197 views

Why use dir_index, filetype, and sparse_super with LUKS volumes?

I have been reviewing various HOWTOs and blog posts about encrypted LUKS volumes formatted with ext3. Every single document specifies mkfs with: -O dir_index,filetype,sparse_super and not one of them ...
4
votes
3answers
864 views

Can cryptsetup read mappings from /etc/crypttab?

I have a virtualized CentOS 7 server that needs to mount multiple password-protected encrypted volumes. I cannot automatically map the devices on boot, because I don't have access to the console ...
2
votes
2answers
77 views

Linux: Detecting/thwarting system modification or use of single user mode

Working through a backup solution and could use some security assistance. Please see below. The process For our editing business, we have an offsite backup server that we update nightly using rsync ...
0
votes
1answer
310 views

Ubuntu 12.04 LUKS/dmcrypt disk to disk copy freezes

I have 2 external USB hard drives encrypted with LUKS in Ubuntu 12.04. Generally, the both drives are very slow with LUKS/dmcrypt, e.g. 7 MB/s for both read/write, but I could live with this. However,...
7
votes
1answer
3k views

Creating a grow-on-demand encrypted volume with LUKS

I am trying to create an encrypted, growing-as-needed file system in with Linux. I am familiar with LUKS and cryptsetup. I can create an empty file: fallocate -l 512M /root/image I can create a ...
0
votes
1answer
504 views

Adding new physical volume in encrypted volume group (LUKS)

I have a CentOS 6.6 desktop and chose the encrypt option upon installation. This created a LUKS volume group. Everything works fine, but I want to add an additional drive to the volume group. From ...
0
votes
1answer
71 views

What are the Security Implications of not fully overwriting a fresh LUKS disk prior to use

I recently read this nice Howto tutorial about doing backups with whole disk encryption using LUKS. Surprisingly for me this tutorial contains as the first part of step #3 a command to overwrite the ...
3
votes
1answer
2k views

LUKS full disk encryption use keyfile instead of passphrase

I have enabled LUKS full disk encryption on an LVM volume while installing centos6.6, however it asks for a passphrase every time the OS is rebooted. I am now trying to use a key file according to ...
1
vote
2answers
756 views

LUKS/dm-crypt security in the case of a break-in

This is an encryption topic I've been confused by for a while now. From what I understand of LUKS, once the LUKS volume is opened with a passphrase and the resulting device mapper device is mounted, ...
0
votes
1answer
506 views

Running python to unlock luks full disk encryption

I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device ...
1
vote
1answer
483 views

How do I replace a disk with LUKS on LVM2 - no raid, no span

I have LUKS on LVM (LVM Partitions created first, then each partition is encrypted separately, following this guide on Arch Wiki). I am using two volume groups, and each is isolated to a drive. This ...
3
votes
2answers
4k views

Removing failing drive from LVM volume group … and recovering partial data from an incomplete LV (with a missing PV)

I've been fighting this issue for some time now. I have a Logical Volume with 3 disks, 1.5TB, 2TB and 3TB. The 1.5TB drive is failing. Lots of I/O errors and dead bad sectors. I started pvmove to ...
2
votes
1answer
1k views

LUKS partition recovery

A drive with 2 partitions - the first partition is plain ext4, second one is encrypted LUKS. The partition table has been overwritten. I've found the beginning of the second partition, which I need to ...